This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/ye5C_kadgii92ISzlEhgEuRHDcI.roa
File:                     ye5C_kadgii92ISzlEhgEuRHDcI.roa (raw, json)
Hash identifier:          /mdMzGrDF0JgK5G0IyYl7tIgRvh+U9kInD7LNjlB+Ag=
Subject key identifier:   C9:EE:42:FE:46:9D:82:28:BD:D8:84:B3:94:48:60:12:E4:47:0D:C2
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       EDF0
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/ye5C_kadgii92ISzlEhgEuRHDcI.roa
Signing time:             Mon 19 Jan 2026 22:27:40 +0000
ROA not before:           Mon 19 Jan 2026 22:27:40 +0000
ROA not after:            Fri 23 Oct 2026 03:01:03 +0000
asID:                     134762
IP address blocks:        43.226.72.0/22 maxlen: 22
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60912 (0xedf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Jan 19 22:27:40 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=C9EE42FE469D8228BDD884B394486012E4470DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:16:6c:a8:4a:a1:78:53:f6:aa:be:62:6f:f4:
                    86:2c:0e:cf:09:34:6c:c3:f1:83:bb:59:10:38:27:
                    e5:5f:1a:bb:4e:da:d5:13:2d:a1:cc:42:60:a0:0c:
                    49:03:01:4a:58:0e:66:c4:93:40:0f:10:2d:3c:88:
                    cd:6b:23:42:e0:99:b5:6d:e1:18:5b:a5:0c:5f:5b:
                    3c:ec:99:ba:89:12:91:8d:c6:c7:b5:cc:b4:df:16:
                    a9:60:93:45:ef:e1:64:1d:48:0a:58:c0:33:80:ca:
                    63:97:f7:8b:9c:2b:4d:0c:9a:9b:75:ac:ce:8e:b5:
                    cb:62:56:2b:e0:58:98:cf:da:33:8a:9f:cf:21:bf:
                    83:d5:e9:bd:d7:97:12:6d:19:9d:3d:fd:04:e5:93:
                    b6:c5:a7:a0:10:53:b9:a8:ff:08:13:e9:ba:64:4c:
                    fe:3d:db:be:e5:ff:9e:bf:e9:5a:3b:c4:a5:bb:67:
                    a2:35:3e:2f:31:17:98:09:a6:8a:37:2a:0f:b7:e7:
                    4e:41:3d:d4:ae:5b:fa:b4:22:05:f3:a0:cd:aa:e6:
                    a3:e1:b1:27:cc:5c:41:49:79:07:0b:4e:21:7f:a2:
                    0d:9f:68:7a:3e:70:3b:8b:d0:45:7a:b3:2b:0a:eb:
                    1a:c5:23:24:d8:48:37:3b:3c:9c:b9:85:9d:b3:f9:
                    0a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EE:42:FE:46:9D:82:28:BD:D8:84:B3:94:48:60:12:E4:47:0D:C2
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/ye5C_kadgii92ISzlEhgEuRHDcI.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:d7:17:ba:a8:df:3e:42:b6:63:5d:77:64:69:f8:76:82:17:
         ae:12:40:db:96:23:c1:9d:e2:3f:4b:ad:f8:ac:2f:f5:81:0c:
         1f:af:f4:5d:2f:b9:20:58:d2:d7:86:bb:0c:64:d5:0a:26:71:
         cd:32:22:e9:23:05:ae:35:0c:d1:5b:e7:11:dd:c1:a6:9e:c2:
         f4:4f:6b:86:e8:bf:8b:82:64:63:20:f9:ad:cf:e7:58:ba:7d:
         51:30:24:56:9f:e7:b5:9a:c3:b8:45:a7:3f:dc:e6:0a:45:93:
         13:5c:48:02:e0:7f:32:91:01:05:a0:01:65:03:db:84:22:28:
         39:cb:c9:69:0d:eb:d1:2d:b4:14:be:20:63:43:ca:fa:e1:c9:
         57:68:34:70:a6:04:36:1b:c8:92:08:58:6b:ae:f5:f4:bd:0f:
         47:02:69:77:d4:f4:14:78:7b:84:9f:a4:d4:9d:ee:cc:10:0a:
         7b:d9:fe:a4:84:90:28:e0:69:3b:e0:59:8b:f9:12:6c:a3:fe:
         ff:60:7f:e6:38:28:67:1f:fc:10:96:af:8b:34:0b:ea:11:9f:
         c0:04:14:86:40:8d:14:fb:68:e0:ad:64:9a:95:6e:0f:e0:20:
         82:c8:98:4b:8f:73:41:a6:b8:ba:5d:85:4f:25:13:6c:39:dd:
         8a:74:79:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:19:53 2026 by rpki-client